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Abstract 

O- In this paper we devise a rational curve fitting algorithm and apply it to the list decoding 

of Reed-Solomon and BCH codes. The resulting list decoding algorithms exhibit the following 

m ■ 

' significant properties. 

in ; 

• The algorithm achieves the limit of list error correction capability (LECC) n(l — vl — D) 



X 



for a (generalized) (n,k,d = n — k + 1) Recd-Solomon code, which matches the Johnson 



bound, where D = — denotes the normalized minimum distance. The algorithmic complexity 
. is O (n 6 (l — \/l — D) 8 )- I n comparison with the Guruswami-Sudan algorithm, which exhibits 

the same LECC, the proposed requires a multiplicity (which dictates the algorithmic complex- 
ity) significantly smaller than that of the Guruswami-Sudan algorithm in achieving a given 



LECC, except for codes with code-rate below 0.15. In particular, for medium-to-high rate 
codes, the proposed algorithm reduces the multiplicity by orders of magnitude. Moreover, for 
any e > 0, the intermediate LECC t — [_£• f + (1 — e) • (n— \J n(n — dj)\ can be achieved by the 
proposed algorithm with multiplicity m = L7J • Its list size is shown to be upper bounded by 
a constant with respect to a fixed normalized minimum distance D, rendering the algorithmic 
complexity quadratic in nature, 0(n 2 ). 

• By utilizing the unique properties of the Berlekamp algorithm, the algorithm achieves the 
LECC limit ^(1 — \/l — 2D) for a narrow-sense (n,k,d) binary BCH code, which matches 
the Johnson bound for binary codes. The algorithmic complexity is O (n 6 (l — \/l — 2D) 8 ) . 
Moreover, for any e > 0, the intermediate LECC t = [_e • | + (1 — e) ■ - — ^ — ^-j can be 
achieved by the proposed algorithm with multiplicity m = L^J- Its list size is shown to 
be upper bounded by a constant, rendering the algorithmic complexity quadratic in nature, 
0(n 2 ). 

Index Terms — List decoding, Berlekamp-Massey algorithm, Berlekamp algorithm, Reed-Solomon 
codes, BCH codes, Johnson bound, Rational curve-fitting algorithm. 
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I. Introduction 



Reed- Solomon codes are the most commonly used error correction codes in practice. Their widespead 
applications include magnetic and optical data storage, wireline and wireless communications, and 
satellite communications. A Reed-Solomon code (n,k) over a finite field GF(g) satisfies n < q and 
achieves the maximally separable distance, i.e., d = n — k + 1. Its algebraic decoding has been 
extensively explored but remains a challenging research topic. 

It is well-known that efficient algorithms exist to decode up to half the minimum distance with 
complexity 0(dn), namely, the Berlekamp-Massey algorithm [2,19] and the Euclidean algorithm [26], 
which utilize the frequency spectrum property, and the Berlekamp- Welch algorithm, which utilizes the 
polynomial characteristics [27]. Koetter [15] devised a one-pass algorithm, building on the Berlekamp- 
Massey algorithm, to implement the generalized minimum distance (GMD) decoding, which otherwise 
requires L^-J rounds. Berlekamp [3] devised a one-pass algorithm, building on the Berlekamp- Welch 
algorithm, to implement d + 1 GMD decoding. Kamiya [14] presented one-pass GMD decoding al- 
gorithms and a one-pass Chase decoding algorithm for BCH codes utilizing the Berlekamp- Welch 
algorithm. 

Sudan [25] discovered a polynomial-time algorithm, building on the Berlekamp- Welch algorithm, 
for (list) decoding Reed-Solomon codes beyond the classical correction capability L^-J , however, the 
algorithm is effective only when the code rate f < 3. Schmidt, Sidorenko, and Bossert [23] virtually 
extend one codeword to a sequence of interleaved codewords which yields a multiple-sequence linear 
shift register synthesis, and exploit the generalized Berlekamp-Massey algorithm, whose complexity 
is quadratic in nature, to correct errors beyond half the minimum distance. The algorithm succeeds 
if there is a unique solution within a certain capability, which is larger than the conventional error 
correction capability when the code rate is below |. Its error correction capability and rate threshold 
largely coincide with those of the Sudan algorithm in [25] , whereas its algorithmic complexity is much 
lower than the Sudan algorithm. Guruswami and Sudan [9] devised an improved version of [25], 
which is capable of decoding beyond half the minimum distance over all rates. More specifically, the 
algorithm lists all codewords up to distance n(l — y/l — D) (where D denotes the normalized minimum 
distance D = ^) from the received word, while the algorithmic complexity is polynomial in nature. 
Its performance matches the Johnson bound [12], which gives a general lower bound on the number 
of errors one can correct using small lists in any code, as a function of the normalized minimum 
distance D. McEliece [20] characterized the average list size of the Guruswami-Sudan algorithm and 
showed that the list most likely contains only one codeword. Guruswami and Rudra [11] showed the 
optimality of the list error correction capability (LECC) n(l — y/l — D) in the sense that the number 
of codewords lying slightly beyond the boundary can be superpolynomially large in code length n. 
Koetter and Vardy [16] showed a natural way to translate the soft-decision reliability information 
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Figure 1: Normalized (list) error correction capability as a function of the normalized designed mini- 
mum distance for binary BCH codes. 

provided by the channel into the multiplicity matrix which is directly involved in the Guruswami- 
Sudan algorithm. The resulting algorithm outperforms the Guruswami-Sudan algorithm. 

In essence, the Guruswami-Sudan algorithm is a polynomial curve-fitting algorithm that determines 
all polynomials which passes through at least y/n(n — d) points out of n distinct points. Specifically, 
when given n distinct points {(x{, Vi)}™=Q, where [yo, yi, ■ ■ ■ , y n -i] denotes a received word, a (l,n — d)- 
weighted degree bivariate polynomial Q(x, y) is constructed to pass through all n points, each with 
appropriate multiplicity, then Q(x, y) contains all desired polynomials p(x) as its factors in the form of 
y — p(x). Finally all desired polynomials p(x) are factorized iteratively [9]. The interpolation process 
can be expedited by utilizing the updating algorithm in [15] with quadratic complexity, whereas 
straightforward implementation using Gaussian elimination requires cubic complexity. 

In this paper, we formulate the list decoding of Reed-Solomon codes as a rational curve-fitting 
problem utilizing the polynomials constructed by the Berlekamp-Massey algorithm. Specifically, let 
A(x) and B(x) be the error locator and correction polynomials, respectively, as obtained from the 
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Berlekamp-Massey algorithm. List decoding then finds pairs of polynomials b(x) and \(x), such that 
each pair leads to a valid candidate error locator polynomial A' (a;) = A(x) • A(x) + b(x) ■ xB(x), i.e., 
all the roots of A'(x) are distinct and belong to the pre-defined space. We reduce this problem to 
a rational curve-fitting problem and subsequently present a novel polynomial algorithm comprised of 
rational interpolation and rational factorization. Using the up-to-date most efficient implementation 
algorithms [15,18], the proposed algorithm exhibits the complexity O ^n 2 (y / n — \fk)^. The proposed 
list decoding algorithm exhibits the same LECC n — y/n(n — d) as the Gur us wami- Sudan algorithm. 
However, the proposed algorithm requires much lower multiplicity, which dictates the algorithmic 
complexity, for almost the entire range of code rates. In particular, the proposed algorithm reduces 
the multiplicity by orders of magnitude for medium-to-high rate codes. Finally, the proposed algorithm 
utilizes the end results of the Berlekamp-Massey algorithm, in contrast to the decoding algorithms 
in [21, 23], which directly incorporate syndromes and achieve performance gains over conventional 
hard-decision decoding only when the code rate - < |. By observing that even iterations in the 
Berlekamp algorithm are automatically satisfied in decoding binary BCH codes, we present a modified 
version of the proposed algorithm that exhibits the LECC §(1— \/l — 2D), which matches the Johnson 
bound for binary codes [12]. A comparison to existing state-of-the-art LECCs is depicted in Figure [TJ 

We also reveal a fundamental property of Reed-Solomon and binary BCH codes, namely, that 
there exist at most a constant number of codewords, regardless of code length n, with respect to 
an LECC under arbitrary small fraction away from the Johnson bound. Furthermore, we show that 
the corresponding Johnson bound can be arbitrarily approximated by the derivative algorithms with 
quadratic complexity, for both Reed-Solomon and binary BCH codes. 

The remainder of the paper is organized as follows. Section II. A briefly introduces the Berlekamp- 
Massey algorithm for decoding Reed-Solomon codes, and then extends one iteration to correct up 
to [f J errors with negligible additional complexity. Section II. B presents a re-formulated Berlekamp 
algorithm for decoding binary BCH codes, and then extends one iteration to correct up to |_^r"J errors 
with negligible additional complexity. The proposed list decoding algorithm for Reed-Solomon codes 
is detailed in Section III. The list decoding problem is formulated in Part A, the rational interpolation 
process is then described in Part B, followed by the rational factorization in Part C. The algorithmic 
description and performance assertion are presented in Part D and the computational complexity is 
characterized in Part E. Finally Part F shows that the LECC limit can arbitrarily approximated with 
derivative algorithms with constant multiplicities which exhibit only quadratic complexity. Section 
IV presents an improved algorithm for decoding binary BCH codes. The paper is concluded with 
pertinent remarks in Section V. 
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II. Algebraic Hard-Decision Decoding of Reed-Solomon and BCH 
Codes 



A. Berlekamp-Massey Algorithm and its One-Step Extension for Decoding Reed- 
Solomon Codes 

For a (possibly shortened) Reed-Solomon C(n, k) code over GF(g), a fc-symbol D = [D^-i, D £_2, . . . , 
Di, Do] is encoded to an n-symbol codeword C = [C n _i, C ra _2, • • • , C±, Co], or more conveniently, 
a dataword polynomial D{x) = Df ; _ix k ~ 1 + D^-2 xk ~ 2 + • ■ ■ + D\x x + -Do is encoded to a codeword 
polynomial C(x) = C n -\x n + C n -2X n ~ 2 + . . . + C\X + Co, by means of a generator polynomial 

n— fe— 1 

G(x)= Y[ (x-a mo+i ) 

i=0 

where a is a primitive element of GF(g) and mo is an arbitrary integer (in this presentation we do 
not distinguish between a vector A = [Aq, Ai, A2, ■ ■ ■ , A{\ and its polynomial representation A(x) = 
Ao + A\x + A2X 2 + . . . Aix 1 ). A polynomial of degree less than n is a codeword polynomial if and only 
if it is a multiple of the generator polynomial G(x). As can be readily seen, a codeword polynomial 
C(x) satisfies 

C(a l ) =0, % = mo, mo + 1, mo + 2, . . . , mo + n — k — 1. 

The minimum Hamming distance of the code is d = n — k + 1, an attribute known as maximally- 
distance- separable (cf. [4]). 

Let C{x) denote the transmitted codeword polynomial and R(x) the received word polynomial. 
The decoding objective is to determine the error polynomial E{x) such that C(x) = R(x) — E{x). 

In the following we introduce the Berlekamp-Massey algorithm, which provides a foundation for 
our list decoding algorithms. It begins with the task of error correction by computing syndrome values 

Si = R(a i+mo ) = C{a l+mo ) + E(a i+m ») = E(a i+m °), i = 0, 1, 2, . . . , n - jfe - 1. 

If all n — k syndrome values are zero, then R{x) is a codeword polynomial and thus is presumed that 
C(x) = R(x), i.e., no errors have occurred. Otherwise, let e denote the (unknown) number of errors, 
Xi G {a -1 }^ 1 , i = 1,2, . . . ,e, denote the error locations, and Y{ G GF(g), i = 1,2, . . . ,e, denote the 
corresponding error magnitudes. 
Define the syndrome polynomial 

S(x) = S + S lX + S 2 x 2 + ... + S n - k - 1 x n - k - 1 , (1) 

the error locator polynomial 

e 

A(x) = l\(l - X iX ) = 1 + Aix + A 2 x 2 + ... + A e x e , (2) 
i=i 
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and the error evaluator polynomial 

e e 

n(x) = YiX™° Y\ (i - Xjx) = n + si lX + n 2 x 2 + ... + n^x*- 1 . (3) 

i=l j=l,j¥=i 

The three polynomials satisfy the following key equation (cf. [4]) 

n(x) = A(x)S(x) (modx n - k ). (4) 

The Berlekamp-Massey algorithm can be used to solve the above key equation, given that the 
number of errors e does not exceed the error-correction capability [^^J (cf- [2,4]). Below we slightly 
re- formulate the Berlekamp-Massey algorithm given in [4], so as to facilitate the characterizations 
afterwards: 

Berlekamp-Massey Algorithm 

• Input: S = [S , Si, S 2 , S n - k -i] 

• Initialization: A<°)(x) = 1, B^(x) = 1, and L ( ° ] = 0, L { ° } = 

• For r = 0, 1, 2, . . . , n — k — 1, do: 

- Compute A( r+1 ) = YnS) A| r) • S M 

- Compute A( r+1 )(a;) = A< r »(i) - A< r+1 ) • xB^(x) 

- If A< r+1 ) ^ and 2L { [ ] < r, then 

* Set <- (A^ 1 ))- 1 • AW(i) 

* set 4 +1) -4 r) + i, 4 r+1) -4 r) 

- Else 

* Set S( r+1 )(x) <- Z-B^^r) 

* set 4 +1 )- 4^ + 1, 4 +1) -4 r) 

endif 
endfor 

• Output: A(x), B{x), L\, Lb 

Note that in the above description, we used superscript "( r )" to stand for the r-th iteration and 
subscript 'V' the i-th coefficient. La and Lb denote the length of linear feedback shift register (LFSR) 
described by A(x) and B(x), respectively. An LFSR of length L, ao = 1, a±, a.2, ■ ■ ■ , cll, is called to 
generate the sequence sq, s±, S2, ■ ■ ■ , s r if 

L 

y~] Sj-jaj = 0, i = L, L + 1, . . . ,r. (5) 

3=0 
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The essence of the Berlekamp-Massey algorithm is to determine a minimum-length LFSR that 
generates the syndrome sequence So, Si, S2, ■ S n -k-i [2,19], It is worth mentioning that there 
may exist multiple minimum-length LFSRs that generate the sequence So, Si, ... , S n -k-i, and A(x) 
obtained from the Berlekamp-Massey algorithm is one of them when non-unique. The error locator 
polynomial A(x) and the correction polynomial B(x) are characterized by the following lemma. 

Lemma 1 Let A(x) be the error locator polynomial and B(x) be the correction polynomial, computed 
by the Berlekamp-Massey algorithm. 

(i) . La and Lb, the length of LFSR described by A(x) and B(x) respectively, satisfy 

L A + L B = d-l. (6) 

(u). The degrees of A(x) and B(x) satisfy 

deg(A(a;)) < La, deg(5(x)) < L B . (7) 

When A(x) is the true error locator polynomial as defined in ([2D, deg(A(x)) = La- 

(Hi). The polynomials A(x) and B(x) are coprime, i.e., the two do not share a common factor. 

Proof: (i). We show the following more general result 

+ 4 } = r. (8) 
It follows that in each iteration either L^ +1 ^ <— L^ + 1, L B +1 ^ <— L A , or L^ +1 ^ <— L A , L^ +1 ^ <— 

(r) 

L B + 1, thus their sum increases by 1 in either case. 

(ii) . We show the first part by induction. When i = 0, we have L A = deg(A^(x)) = and 
L% ] = deg{B^\x)) = 0. Assume that deg(A^ r \x)) < L^ and deg(B^ r \x)) < L% ] hold for % = r. In 
the case of A( r+1 ) / and 2L ( [ ) < r, we have the following iteration 

• A( r+1 \x) = A^(x) - A(' r+1 ) • xB( r \x) 

• B( r+1 )(x) <- (A^ 1 ))- 1 • AW(x) 
. r ( r+1 ) <_ t W 4. 1 r ( r+1 ) r W 

• iv A <— L, B + 1, Ivg <— Iv A . 

([8]), in conjunction with the condition 2L A < r, results in 

T M _ r T (0 > r (0 

Therefore, we obtain 

deg(A( r+1 )(x)) = max{deg(AW(x)), deg(B^ r \x)) + 1} < maxjL^, l£> + 1} = L% ] + 1 = L% +1) . 

deg(B^ r+1 \x)) = deg(AW(x)) < 1$ = L% +t) . 
When A( r+1 ) = 0, we have the following update 
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. B (r+i)( x ) <_ x B<r)(x), 4 +1) <~ 4° + L 

The conclusion naturally holds. Finally, when A ( - r+1 ^ 7^ and 2L^ > r, the algorithmic updates 
follow 

• A( r+1 '(x) = AW(i) - A( r+1 ) • xBW(x) 

(|8]), in conjunction with the condition 2L A > r, results in 

f? — A ^ A ' 

Therefore, we obtain 

deg(A (r+1) (x)) = max{deg(AW(x)), deg(flM(x)) + 1} < maxjL^, L^' } + 1} < L A r) = L { [ +1) 

deg{B^ r+1 \x)) = deg(£W(a?)) + 1 < L^ } + 1 = L^ r+1) . 

We thus have justified the first part of (ii). The second part naturally follows (J3j) , Q and the definition 
of generating a sequence in ©. 

Part (Hi) can be shown through contradiction (cf. [15]). Herein we give an inductive proof. 
Evidently, when i = 0, A (0) (x) = 1 and B^\x) = 1 are coprime. Assume that A( r )(x) and 
B^ r \x) are coprime for i = r. For i = r + 1, if A( r+1 ) 7^ and 2L^ < r, then the iteration, 
A( r+1 ) (x) = A( r )(x) - A( r+1 ) • xB^{x) and B^ r+l \x) <- (A^ 1 ))" 1 • A^(x), clearly indicates that 
A( r+1 )(x) and B^ r+1 \x) are coprime, conditioned on that A^ r ^(x) and B^ r \x) are coprime; so is the 
alternative iteration, A( r+1 )(x) = A^ r \x) - A( r+1 ) • xB^'\x) and B^ r+l \x) <- xSW(i). We conclude 
that A(x) and -B(x) are coprime. □□ 

Note the initial cause of deg(A(x)) < La is due to the special condition [2] 



4 r) = L% ] + 1 and A{ r) = A^B^, where i = L A 
Let n — A; be an odd number. Then, the number of errors up to 



(r) 



a n — k + l d . . 

*0 = 2 = 2 (9) 

can be corrected by the following simple list decoding algorithm 
One-Step- Ahead Berlekamp-Massey Algorithm 

1. If La > to > then declare a decoding failure. 

2. If La < to, then determine all distinct roots in {a~ ^j^c 1 ■ ^ the number of (distinct) roots is 
equal to L\, then apply Forney's formula and return the unique codeword, otherwise declare a 
decoding failure (which is identical to the normal Berlekamp-Massey algorithm). 



8 



3. Evaluate A* = _j D/ ~r , i = 0, 1, 2, . . . , n — 1. 

4. Group the index sets {ii, • • • , H } such that Aj's are identical (each set corresponds to the 
roots of a valid error locator polynomial). 

5. Apply Forney's formula to compute error magnitudes with respect to each index set, each re- 
sulting in a candidate codeword. 

Proof of correctness: We note that A(x) and B(x) are obtained at the (n — k)-t\i iteration 
of the Berlekamp-Massey algorithm. Following the nature of the Berlekamp-Massey algorithm, the 
additional syndrome S n -k determines all valid error locator polynomial A*{x) of degree up to to- More 
specifically, a valid error locator polynomial A*(x) of degree up to to satisfies the form 

A* (x) = A(x) - A(5 n _ fc ) • xB(x) (10) 

where the discrepancy A(5 n _^) is a linear function of S n - k , 

A(5 n _fc) = S n -k~jAj. 

8=0 

We observe that L\ + L x b = n — k + 1. We easily see that A* (a;) has degree up to to if and only 
if La* = La, in particular, A*(x) = A(x) if La < to- This justifies Steps 1 and 2. 

Now assume La = to and A^ = Aj 2 = ... = A^ . By letting A = A il5 A*(x) has degree to, 
and at same time, contains to valid roots, a _n , a~ 12 , a~ H o , i.e., A*(x) is a valid error locator 
polynomial. On the other hand, if an error locator polynomial A(x) is of degree to and contains to 
valid roots, a _n , a - * 2 , . . . , a~ H o . Then, following (|10p . we have 

= A(a- il ) - A{S n - k ) ■ a- il B(a- il ), I = 1, 2, . . . , t , 

indicating A^ = A, 2 = . . . = Aj tQ = A(5 n _fc)- We thus justify Steps 3, 4, and 5. □□ 
Remarks: Compared to the approach in [4], where the syndrome S n -k is exhaustively searched 
throughout the field GF(q), each time A*(x) is produced and examined, the proposed algorithm 
reduces the computational complexity by a factor of q. Essentially, the proposed algorithm extends 
one iteration beyond the conventional Berlekamp-Massey algorithm while maintaining the original 
computational complexity. Further, note that an index (location) can only be classified to one group, 
thus any two sets of error locator roots are disjoint. As a result, there exist at most [^-J distinct 
codewords at distance to from a received word. An extension of the above method is the |_^r"J decoding 
algorithm which utilizes the Chien Search to determine the subsequent two unknown discrepancies [6] . 

Remark: The foregoing one-step-ahead algorithm is essentially a degeneration of the list decoding 
algorithm to be presented in next section. 



9 



B. Berlekamp Algorithm and its One-Step Extension for Decoding BCH Codes 

The underlying generator polynomial of a BCH code contains consecutive roots a, a 2 , . . . , a 2t . Note 
for an underlying binary BCH code, the designed minimum distance d is always odd, which is actually 
a lower bound of the true minimum distance. 

The Berlekamp algorithm is a simplified version of the Berlekamp-Massey algorithm for decoding 
binary BCH codes by incorporating the special syndrome property 

SWi = Sf, i = 0, 1, 2, . . . 

which yields zero discrepancies at even iterations of the Berlekamp-Massey algorithm (cf . [2] ) . Below we 
re-formulate slightly the Berlekamp algorithm described in [2], so as to facilitate the characterizations 
thereafter. 

Berlekamp Algorithm 

• Input: S = [S 0) Si, S 2 , S d _ 2 ] 

• Initialization: A(°)(x) = 1, B ( -^(x) = x' 1 , = 0, L ( B 1] = -1 

• For r = 0, 2, . . . , d - 3, do: 

- Compute A( r + 2 ) = £)fio A< r) • S M 

- Compute A( r+2 )(x) = A«(x) - A(''+ 2 ) • x 2 B^- 1 \x) 

- If A(''+ 2 ) ^ and 2L { [ ] < r, then 

* Set B^ r+1 \x) <- (A^ 2 ))- 1 • K^{x) 

* SetL^^L^ + 2, 4 +1) -4 r) 

- Else 

* Set B^ r+1 \x) <- x 2 B^- l Hx) 

* set 4 r_1) + 2, 4 +2) -4 r) 

endif 
endfor 

• Output: A(x), B(x), L\, Lb 

The following lemma characterizes the error locator polynomial A(x) and the correction polynomial 
B(x) produced by the Berlekamp algorithm. 

Lemma 2 Let A(x) and B(x) be the error locator and correction polynomials, respectively, computed 
by the Berlekamp algorithm. 

{i). La and Lb, the length of AFSR described by A(x) and B(x) respectively, satisfy 

L A + L B = d-2. (11) 
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(ii) . The degrees of A(x) and B(x) satisfy 

deg(A(x)) < L A , deg(B(x)) < L B . (12) 

When A(x) is the true error locator polynomial as defined in (|2|), deg(A(x)) = La- 

(iii) . The polynomials A(x) and B(x) are coprime, i.e., the two do not share a common factor. 

Similarly, we have the following one-step-ahead algorithm that corrects (in the list decoding sense) 
up to ^rr- errors at essentially same complexity as the original Berlekamp algorithm. The proof is 
straightforward. 

One-Step- Ahead Berlekamp Algorithm 

1. If La > ^rp, then declare a decoding failure. 

2. If La < ^p, then determine all distinct roots in {af - *}^ . If the number of (distinct) roots 
is equal to La, then return the corresponding unique codeword, otherwise declare a decoding 
failure (which is identical to the normal Berlekamp algorithm) 

3. Evaluate A< = Q J^ (a L) , i = 0, 1, 2, . . . , n - 1. 

4. Group the index sets ■ ■ ■ >^L A } such that Aj's are identical (each set corresponds to the 
roots of a valid error locator polynomial). 

5. Flip bits on all indices (locations) of each set obtained in Step 4, each resulting in a candidate 
codeword. 

Remark: The proposed algorithm is superior to the "trick" presented in [5] in which error 
correction capability is achieved only for even-weight subcode by exploiting the parity syndrome of a 
received word. 



III. List Decoding Algorithm for Reed-Solomon Codes 

In this section we present a list decoding algorithm for Reed-Solomon codes that corrects up to 
\n — 1 — \Jn(n — d)~\ errors, which is identical to that of the Guruswami-Sudan algorithm in [9]. We 
shall extend the notation to = i to allow d to take any integer value, instead of even value as initially 
defined in ([9]). We use the terminology "valid" root to indicate a root is in the pre-defined space 
which, in this context, means {1, a -1 , . . . , a^™ -1 )}. We also define a companion polynomial Q(x,y) 
of a bivariate polynomial Q(x,y) to be Q(x,y) = Q(x, l/y)y Py (herein P y denotes the power of y in 
Q(x,y)), and [y l ]Q{x,y) the polynomial of x associated with the term y . Specifically, 

Q(x,y) = fp y (x) + fp y . l (x)y + f P ^ 2 (x)y 2 + ... + f 1 (x)y p y- 1 + f (x)y p y (13) 
Q(x,y) = f t (x) (14) 



y' 



n 



if Q(x, y) is in form of Q(x, y) = f (x) + fx(x)y + f2(x)y 2 + ■■■ + fp y (x)y Py . 
A. Problem Formulation 

Lemma 3 Let A*(x) be the true error locator polynomial as defined in ([2]). Let A(x) and B(x) be the 
error locator and correction polynomials, respectively, obtained from the Berlekamp-Massey algorithm. 
Then, A* (x) exhibits the form of 

A*(x) = A(x) • X*(x) + xB(x) ■ b*(x), (15) 

where the polynomials X* (x) and b* (x) exhibit the following properties 

(i) . AS = 1; 

(ii) . ifb*(x) = 0, then X*(x) = 1; 
(Hi). X*(x) andb*(x) are coprime; 

(iv) . deg(A*(x)) = deg(A*(x)) - L A & deg(b*(x)) < deg(A*(x)) - L xB , or 
deg(A*(x)) <deg(A*(x))-L A & deg(6*(x)) = deg(A*(x)) — L x b; 

(v) . i/deg(A*(x)) < n — k, then X*(x) and b*(x) are unique. 

Proof: When the number of errors e < L^ir^J > the above conclusions trivially hold, following the nature 
of the Berlekamp-Massey algorithm. In the following we consider for the case e > L^^y^J • Suppose a 
genie tells additional syndromes S n -k, S n -k+i • • • , 5*2 e -i, (alternative interpretation is to assume the 
all- zero codeword is transmitted and thus the additional syndromes are available) , the true error locator 
polynomial A* (x) can be obtained by further applying the Berlekamp-Massey algorithm in conjunction 
with syndromes <S n _fc, 5 n _fe + i, . . . , S^e-i- Thus, (fT5|) holds by the nature of the Berlekamp-Massey 
algorithm. 

(i) . Note that Ag(x) = 1 by definition ([2]) and Ao(x) = 1 by the nature of the Berlekamp-Massey 
iteration, 

A(r+i)( x ) = AM( X ) _ A^+^xB^ix), and by the initial condition A<°)(s) = 1. On the other 
hand, the constant term of xB(x) ■ b*(x) is always zero. Therefore, Xq(x) = 1. 

(ii) . If b*(x) = 0, then the corresponding (additional) discrepancies A^ n ~ k \ A( n-fc+1 ), . . . , A^ 2e \ 
are all zeros. We thus obtain 

A*(x) = A( 2e \x) = A( 2e " 1 )(x) = . . . = A("~ fc )(x) = A(x), 

which justifies the property (ii). 

(Hi). Let B*(x) be the correction polynomial associated with A*(x). It can be easily shown that 

(cf. [4]) 

A*(x) 
B*(x) 



2e 

n 

r=l 



1 -AWx 
(AMj-^M (l-S^)x 





1 




1 
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where 5^ denotes a binary value associated with selection of B^ r \x) and is zero when A^ = 0, and 
likewise, 

f A(x) 
B(x) 



1 -A^x 




1 


(AW)- 1 ^) (1 - 6^)x 




1 



n—k 

■n 

r=l 

The above equalities, in conjunction with (fT5|) . indicate that 

2e 



A*(x) xfr*(x) 



1 



n 

r=n— fc+1 



1 -A^x 



We proceed to show by induction that A*(x) and xb*(x) are coprime. When r = n — k + 1, we have 
AW(x) = 1 and x&W(x) = — A ( - n_fc+1 * ) x. Clearly AW(x) and xb^(x) are coprime. Assuming that 
A^(x) and xftW(x) (i.e., the case r = n — k + i) are coprime, we then have 



A( <+1 >(a?) = [a»(x) x&«(x) 



1 -A^+^x 

^ A (r+l)j-l ff (r+l) (1 _ j(r+l)) x 

A w (x) + (A( r+1 ))- 1 j( r+1 )x6 w (x) - A( r+1 >xA«(x) + (1 - 5 (r+1) )x 2 6 w (x) 



When j( r+1 ) = 0, we obtain 

A (m) (x) x& (m) (x)j = [a w (x) - A( r+1 )xA (i) (x) + x 2 6 (i) (x) 

which clearly indicates that A^ +1 ^(x) and xb^ i+1 \x) are coprime. When <5( r+1 ) = 1, we obtain 

A^ +1 )(x) x6 (m) (x)j = [A«(x) + (A( r+1 ))- 1 x6 w (x) - A( r+1 )xA (i) (x)" 

which again indicates that A^ +1 ^(x) and x&( i+1 )(x) are coprime. Therefore, A*(x) is coprime to xb*(x) 
and subsequently to b* (x) . 

(iv). The results clearly hold when A*(x) = A(x). We next show for the case A*(x) ^ A(x), which 
indicates that the number of errors e > Given the hypothetical 2e — (n — k) additional syndromes, 
S n -k-, S n -k+i, ■ ■ ■ , S2e~i, A*(x) is the minimum-length LFSR to generate the syndrome sequence So, 
Si, 5*2, . . . , S^e-i- By Lemma[U L\* = e = deg(A*(x)). On the other hand, we observe that A*(x) and 
b*(x) are obtained by further applying the Berlekamp-Massey iterations on top of A(x) = A^ n ~ k '(x) 
and B(x) = B^ n ~ k \x), whose LFSR lengths are L\ and Lb, respectively. Therefore, we have 

deg(A*(x)) < L\* -L A = deg(A*(x)) - L A 
deg(x&*(x)) < La* - L B = deg(A*(x)) - L B . 

Further note that (fT5j) indicates that 

deg(A(x)) + deg(A*(x)) = deg(A*(x)) or deg(xS(x)) + deg(6*(x)) = deg(A*(x)). 
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Without loss of generality, we assume deg(A(x)) + deg(A*(x)) = deg(A*(x)), which immediately yields 

deg(A*(x)) = deg(A*(x)) - deg(A(x)) > deg(A*(x)) - L A , 

where the inequality follows Lemma [TJ We thus obtain 

deg(A*(x)) = deg(A*(x)) - L A and deg(A(x)) = L A . 

(v). We prove Part (v) by contradiction. Assume that there is another pair A(x) and b(x) satisfying 
(|15p . Then, we have 

A*(x) = A(x) • X*(x) + xB{x) ■ b*(x) = A(x) ■ X(x) + xB(x) ■ b(x), 

which immediately indicates 

A(x) • (A*(x) - A(x)) = xB(x) ■ (b(x) - b*(x)). 

Since A(x) is coprime to xB(x) (by Lemma [TJ(iii)), A(x) divides b(x) — b*(x). Likewise, xB{x) divides 
A*(x) — A(x). ^5|) indicates that 

deg(A*(x)) = max{deg(A*(x)) + deg(A(x)), deg(6*(x)) + deg(xS(x))} 

Without loss of generality, we assume deg(A*(x)) = deg(A*(x)) + deg(A(x)). Then, deg(A(x)) = La, 
following Part (iv). Subsequently, 

deg(A(x)) = n- k-L B >e-L B > deg(6*(x)). 

Likewise, deg(A(x)) > deg(6(x)). Therefore, A(x) divides b(x) — b*(x) if and only if 6(x) — 6*(x) = 0, 
i.e., b{x) = b*(x). Part (v) is thus justified. □□ 
Example 1. Consider a transmitted codeword pertaining to the (15, 5) Reed-Solomon code 

c = [0, a 12 , a 10 , a 11 , a 7 , a 5 , a 11 , a 11 , a 6 , a 8 , a 14 , a 11 , a 6 , a 2 , a] 

where a denotes a primitive element of GF(16), and the corresponding received word which has 7 
errors 

r= [0, a 6 , a 10 , a 5 , a 7 , a 5 , a 5 , a 11 , a, a 2 , a 14 , a 12 , a 6 , a 7 , a]. 
The true error locator polynomial is 

A*(x) = (1 - ax)(l - a 3 x)(l - a 6 x)(l - a 8 x)(l - a 9 x)(l - a n x)(l - a 13 x) 
= 1 + a 9 x + a n x 3 + a 5 x 4 + a 12 x 6 + a 6 x 7 . 
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Applying the Berlekamp-Massey algorithm, we obtain the following error locator and correction poly- 
nomials 

A(x) = 1 + a 7 x + a 13 x 2 + ax 3 + a 13 x 4 + a 4 x 5 
B(x) = a 6 x + a 5 x 2 + a 10 x 3 + a 3 x A + a u x 5 . 

It can be verified that A* (x) satisfies the following decomposition 

A*(x) = A(x)(l + ax + a 2 x 2 ) + xB(x) • a 8 . 

□ □ 

Lemma 4 Lei A(x) and be the error locator and correction polynomials, respectively, obtained 

from the Berlekamp-Massey algorithm. Let the distance threshold t > to, where to *s defined in Q. 

(i) . If the degree of A(x), L\ > t, then there is no codeword within distance t from the received word. 

(ii) . If the degree of xB(x), L x b > t, then only A*(x) = A(x) may result in a codeword within distance 
t from the received word. 

Proof: We show (i) by contradiction. Assume there is a codeword within distance t from the received 
word. Then, the corresponding error locator locator polynomial A*(x), which has degree up to t, 
generates the syndrome sequence So, S±, . . . , S n _k-i- This contradicts the fact that A(x) represents a 
minimum-length shift register which generates So, Si, ... , S n -k-i- 

(ii). If A(x) contains exactly L\ distinct roots within {ct - *}™^ 1 , then A*(x) = A(x) leads to a 
codeword with distance L\ < t from the received word. Assume there is a codeword at distance e 
from the received word, where e > L\. Then, e > to. This is because, if e < to, then A*(x) is the 
unique minimum-length LFSR to generate the syndrome sequence, So, Si, ... , SVi-fc-i; which obviously 
conflicts the facts A*(x) / A(x). Now assume that the additional syndromes Sn-fc, S n _k+i, ■ ■ ■ ■> S%e-1 
are available and used for further applying the Berlekamp-Massey iterations. Let A^ r ^ (r > n — k) be 
the first nonzero discrepancy, then the error locator polynomial is updated as 

A (r) (x) = A {n ~ k \x) - A^x r - in - k) B {n ~ k \x), 

which immediately indicates 

L\ > 4 r) = L B + r - (n - k) > L xB . 

Since A*(x) is a true error locator polynomial, e = L\* = deg(A*(x)). Thus, A*(x) has degree at least 
L x b, i.e., e > L x b and the proof is completed. □□ 
Example 2. Consider a transmitted codeword pertaining to the (15, 5) Reed-Solomon code 

c = [a 2 , a 3 , a 5 , a 9 , a 12 , a 5 , a 4 , a, a 9 , a 14 , a 9 , a 8 , a 9 , a 11 , a 10 ] 
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and the corresponding received word 



r= [a 2 , a 8 , a 5 , a 9 , 1, a 5 , a 4 , a 12 , a 2 , a 14 , a 9 , a 8 , a 13 , 1, a 11 ] 

which has 7 errors. The true error locator polynomial is 

A*(x) = (1 - ax)(l - a 4 x)(l - a 7 x)(l - a 8 x)(l - a 12 x)(l - a 13 x)(l - a 14 x) 
= 1 + a 5 x + a 4 x 3 + a 14 x 4 + a 8 x 5 + a 12 x 6 + a 14 x 7 . 

The Berlekamp-Massey algorithm returns the error locator and correction polynomials below 

A(a;) = 1 + a 9 x + a 5 x 2 + a 6 x 3 + a 9 x 5 + ax 6 + a 4 x 7 
-B(x) = a 11 + a 5 x + ax 2 + a 2 x 3 . 

Note that A(x) has degree 7, Lemma H] asserts no codewords within 6 symbol difference from the 
received word. □□ 

B. Rational Interpolation 

Dividing both sides of (|15p by xB(x), we obtain 

A*(x) _ A(x) 



xB(x) xB(x) 

Define 

A(a~ i ) 



A*(x) + b*(x) 



0,1,2,. ..,n-l (16) 



where yi is set to oo when B(a~ l ) = 0, whose implication will be explored shortly. Let a _n , a~ 12 , 
. . . , a~ te , be all the valid roots of the true error locator polynomial A*(x). Then, y ■ A*(x) — b*{x) 
passes precisely through e points, {a~ n , y^), (a - * 2 , yi 2 ), . . . , (a~ le , yi e ). 

Given the set of n distinct points {(a~ l , j/i)}^ , we are interested in finding rational functions 
y(x) which pass t (t > to) points, in the sense that y(a~ l ) = yi. If yi = oo, then y{x) must contain the 
pole a~ % . This is because, when B[cT % ) = 0, \(a~ l ) must be zero, due to the fact that -B(x) and A(x) 
are coprime and thus cannot share the root. This is essentially a rational curve-fitting problem. In [9], 
a powerful approach which makes use of multiple interpolation was presented to solve the polynomial 
curve-fitting problem. In essence, it constructs a global bivariate polynomial (curve) Q(x, y) that 
passes through all points with certain multiplicity. By its algebraic nature all desired polynomials 
of the form y — p{x) are its factors [9] . In the following we generalize the approach to the rational 
domain. 

The most efficient known interpolation technique was presented in [18], whose prototype was 
proposed in [15]. This approach exhibits quadratic complexity, as opposed to the straightforward 
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Gaussian elimination method which exhibits cubic complexity. We show that the same approach can 
also be applied to the rational interpolation with appropriate modifications. Firstly, the weight of y 
is determined differently Note that we are essentially interested in the form of y ■ A(x) — b(x). We 
naturally assign the weight of y to be 

w = La - L xB . (17) 

We denote by deg lw (Q(x, y)) the (1, w)-weighted degree of a bivariate polynomial Q(x,y) (refer 
to [9,16] for a detailed description of "weighted degree"). It is worth noting that the weight w may 
take negative values, beyond the traditional notion. Secondly, passing through the point (a~\ oo) with 
multiplicity m has the special meaning, i.e., the companion polynomial Q(x,y) = Q(x, l/y)y Py passes 
(a _i , 0) at m times. Finally, it is worth clarifying the (unconventional) relation between the power of y 
in Q(x, y), denoted by P y , and the (1, unweighted degree of Q(x, y), denoted by deg 1 w (Q(x, y)). P y is 

no longer implicitly |_ lifL ^ — ; — J as in the case of polynomial interpolation, but a more sophisticated 

function of deg 1 w (Q(x, y)), as will be characterized in (|22p in an optimal setup. 

Example 3. (i). For the case presented in Example 1, the weight is set to w = —1. The n = 15 
interpolation points are 

a 11 ) 
a 13 ) 
- 1) 

The following (1, — l)-weighted degree bivariate polynomial passes each of the above points 7 times. 

Q(x,y) = 

y°- [a 7 + a 9 x + a 14 x 2 + a 5 x 3 + a 2 x 4 + a 8 x 5 + a 12 x 6 + a 6 x 7 + ax 8 + a 2 x 9 + a 9 x 10 + ax 12 

+a 5 x 13 + a 12 x 14 + a 7 x lb \ + 
y 1 - [a 11 + a n x + a 14 x 2 + a 9 x 3 + a 12 x 4 + a n x 5 + a n x 6 + x 7 + a 4 x 8 + a 7 x 9 + q 9 x 10 + a n x n 

+a 8 x 12 + a 13 x 13 + a 14 x 14 + a w x 15 + a 2 x w + ax 17 ] 

+ ... + ...+ 

y 15 - [a 13 + a 14 x + a 7 x 2 + a 2 x 3 + x 4 + a 3 x 5 + a 5 x 6 + a 6 x 7 + a 9 x 8 + x 9 + a 2 x w + a 14 ! 11 
+a n x 12 + x 13 + a e x 14 + a 2 x 15 + a 3 x 16 + a 2 x 17 + a u x 18 + a 12 x 19 + a 2 x 20 + a 5 x 21 
+a 7 x 22 + a 3 x 23 + a 14 x 24 + a 10 x 25 + a 6 x 26 + a 7 x 27 + ax 28 + ax 29 + a 2 x 30 ] + 

y 16 - [a 6 + x + a 12 x 2 + a 12 x 3 + a 6 x 5 + a 7 x 6 + a 8 x 7 + ax 9 + a 3 x 10 + a 9 x lx + a 4 x 12 

+a 9 x 13 + a 8 x 14 + a 4 x 15 + a 2 x 16 + ax 17 + a 10 x 18 + a 6 x 19 + a 4 x 20 + a 8 x 21 + a 14 x 22 
+a 9 x 23 + a n x 24 + a n x 25 + a 9 x 26 + x 27 + a 6 x 28 + a 10 x 29 + a 14 x 30 + a 2 x 31 }. 

Note the (1, — l)-weighted degree of the above Q(x,y) is 16, which is beyond the conventional notion 
of degree. 



(1. 


a 6 ) 


(a~\ 


a 8 ) 


(oT 


2 , « 12 ) 


(a - 


3 , a 13 ) 


(a - 


-4 

j 


(or 


5 , a 9 ) 


(a" 6 , 


oo) 


(a~ 


7 , a 4 ) 


(aT 


■ 8 , a 12 ) 


(a - 


-9 


(or 


10 , a 13 ) 


(a- 11 


, oo) 


(aT 


12 , a 6 ) 


(a~ 


- 13 , a 10 ) 


(oT 


-14 
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(ii). For the case given in Example 2, the weight is set to w = 3. The n = 15 interpolation points 

are 

(1, oo) (a-\ a 5 ) (a" 2 , a 2 ) (a" 3 , a 9 ) (a" 4 , a 5 ) 
(a" 5 , a 4 ) (a~ 6 , a 11 ) (a" 7 , a) (a~ 8 ,a 4 ) (a~ 9 ,a n ) 
(a- 10 , a 13 ) (a- 11 , a) ( a - 12 ,a n ) (a~ 13 ,a 3 ) (a" 14 , a 5 ) 
The following (1, 3)-weighted degree bivariate polynomial passes each of the above points 7 times. 

20, y) = 

y°- [a 4 + a 14 x + a 2 x 2 + a 9 x 3 + a n x 4 + a 14 x 6 + a 12 x 7 + a 4 x 8 + a 8 x 9 + a 2 x 10 + a 5 x n + a n x 12 
+a 14 x 13 + a 10 x 14 + a 6 x 15 + a 3 x 16 + a 14 x 17 + a 13 x 18 + a 5 x 19 + a 12 x 21 + x 22 + a 3 x 23 + a n x 24 
+a 8 x 25 + a 8 x 26 + a 10 x 28 + a 6 x 31 + a 6 x 32 + a 7 x 33 + a 13 x 34 + a 5 x 35 + ax 36 + a 12 x 37 + a 2 x 38 
+x 39 + a 4 x 40 + a 2 x 41 + a 10 x 42 + a 6 x 43 + a 7 x 44 + a 3 x 45 + a n x 46 + a 5 x 47 + a 3 x 48 ] + 

y 1 - [a 8 + a 7 x + a 3 x 2 + a 14 x 3 + a 10 x 4 + a 9 x 5 + a 3 x 6 + a 8 x 7 + ax 10 + a u x u + a 6 x 12 + a 4 x 13 
+a 6 x 14 + a 4 x 15 + a 6 x 16 + a 4 x 17 + a 9 x 18 + a 7 x 19 + x 20 + a 10 x 21 + a 13 x 22 + a 9 x 23 
+a 9 x 24 + a 5 x 25 + a 12 x 26 + a 10 x 27 + a 12 x 28 + a 4 x 29 + a 10 x 30 + a n x 31 + a 7 x 32 + a 6 x 34 
+a 10 x 35 + x 36 + a 3 x 37 + a 5 x 38 + a 2 x 39 + a 10 x 40 + a 3 x 41 + ax 42 + a 8 x 43 + a 6 x 45 ] 
+ ... + ... + 

y 12 - [1 + a 4 x 2 + a 4 x 3 + a 6 x 4 + a 4 x 6 + a 14 x 7 + a 12 x 8 + a n x 9 + a n x 10 + a 3 x n ] + 
y 13 - [a u x + a 10 x 2 + a 13 x 3 + a 5 x 4 + a n x 5 + a 10 x 6 + a 13 x 7 + a 5 x 8 ] 

□ □ 

Lemma 5 Lei Q{x,y) be a bivariate polynomial passing through all n points {(1, j/o), (a , yi), 
(a _2 ,y2) ; ■ • ■ ) {a~( n ~~ l \ y n _i)}, where y% is defined in ()16p . eac/i u>itfo multiplicity m. If 

(i - L A )P y + deg 1)W (Q(x, y)) < iro, (18) 

where P y denotes the power of y in Q(x,y) and deg lw (Q(x,y)) (where w is defined in (fT7|) ) denotes 
the (l,w)- weighted degree ofQ(x,y), then Q(x,y) contains all factors of the form y\(x) — b(x) which 
pass through t (t > La) points. 

Proof: Let yX(x) — b(x) be a polynomial passing through t points. Then, 

g (x)^\ p y(x) Q (x, 

is a polynomial and contains at least tm roots, i.e., all roots of A*(x) each with multiplicity m. We 
proceed to show that the degree of g{x) is at most (t — L\)P y + deg x w (Q(x,y)). This is true for the 
starting term without involving y, i.e., X Py (x)Q(x, 0), following the fact 

deg(A p -(x)Q(x,0)) < deg(A(x))P y + deg hw (Q(x, y)) < (t - L A )P y + deg 1)W (Q(x,y)), 
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where deg(A(x)) < (t — L A ) is due to Lemma (3j(w). It also holds true for the ending term associated 
with y p y, i.e., b Py (x) ■ [y Pv ]Q(x, y), as follows 

deg (b p y(x) ■ [y Py ]Q(x,y)) < deg(b(x))P y + (deg hw (Q(x, y)) - wP y ) 

= deg 1; JQO, y)) + P y (deg(b(x)) + L xB - L A ) 
<deg liW (Q(x,y)) + P y (t-L A ), 

where deg(6(x)) + L x b < t is due to Lemma [3) (iv ). Hence, it trivially holds true for the intermediate 
terms. Finally, the fact 

deg(g(x)) <(t- L A )P y + deg 1>w (Q(x,y)) < tm 

indicates the polynomial g(x) has more roots than its degree. This is possible only with g{x) = 0. 
Therefore, we conclude that y ■ A(x) — b(x) divides Q(x,y). □□ 
On the other hand, a sufficient condition for Q(x, y) to pass through all n points {(1, yo), (a -1 , yi), 
(a -2 , 2/2)) • • • ! (a 2/n-l)}j each with multiplicity m, is that the number of coefficients (degrees of 
freedom) of Q(x, y) is greater than the number of linear constraints. Note that the degrees of freedom, 
denoted by A^f ree , is easily seen to be 

at STM (n< ^ ^ (2 de gl ,Jg(^)) + 2-^)^ + 1) 

N iree = 2_^{deg hw (Q(x, y)) + l- iw) = (19) 

i=0 

whereas passing through a point with multiplicity m results in m ^ +1 ^ linearly independent constraints 
(readers are referred to [9] for detailed description). Thus, the number of linear constraints, denoted 
by iVcstr, is 

nm(m + 1) . . 

iVcstr = K — (20) 

We proceed to maximize the degrees of freedom subject to fixed number of errors e = t and the 
fixed multiplicity m and the constraint (|18p . as follows 

(2de gl JQ(x,y)) +2 -wP y )(P y + l) 



N{ ree = 
< 



2 

(2(tm - 1 - (t - L A )Py) + 2 - WPy){Py + l) 

2 

= {tm - P y (t - t )){P y + 1) 

= -(t-to)Py + P y (tm-t + t ) +tm 

where "=" is achieved in "<" if and only if 

degi,JQ*(x,?/)) = tm- 1 - (t - L A )P y (22) 
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which optimally accommodates the zero constraint (|18p . and the first equality is due to the fact 



w L A + L xB n-k + l 

L\ = = = tn. 

2 2 2 

Clearly, the maximum degrees of freedom is achieved by choosing P* to be the closest integer to 

tm— t+tp 

tm — t + to 



2t-2t ' 1-e -' 



P, 



+ 0.5 





tm 




_2t - 2t _ 



2t - 2t 

Therefore, the optimal choice of m is the minimum integer that enforces -/Vf rcc > N cstr , i.e. 

2 



(t - t ) 



tm 



2t - 2t . 



tm — t + to "\ Z _|_ (tm + t — to) 2 ^ nm(m + 1) 



(23) 



(24) 



2t-2t ) ' 4(t — 1 ) 

We next present an explicit construction of a valid (but not necessary optimal) multiplicity. Note 
the maximum degrees of freedom is bounded by 



max{N iree } = -(t-t ) 



tm 



2t - 2t 



tm — t + to\ 2 (tm + t — to) 
2t - 2to J + 4(t - t ) 



> 



t - t (tm + t - t f 



4 4(t - t ) 

Hence, to solve for the linear equation system, it suffices to enforce 

(tm + t — to) 2 t — to nm(m + 1) 



4(t - 1 ) 



> 



which is reduced to 



m 2 (t 2 - 2n(t - t )) - 2m(t - t )(n - t) > 0. 



(25) 



(26) 



(27) 



The above inequality holds true for sufficiently large m if and only if 

t 2 - 2n(t - t ) > 

which in turn indicates that 



t < n - y/n(n - d) (28) 
which is equal to that of [9]. When t < n — sjn(n — d), it suffices to choose the multiplicity m to be 



m 



2(t-to)(n-t) 



+ 1 



t(2t - t) 
t 2 - 2n(t - t ) 



(29) 



t 2 - 2n(t - t ) 

The following derives a lower bound on the optimal multiplicity m opt by relaxing P y to a real 
number. More specifically, with P y being a real number, the constraint iVf ree > iV cs t r simplifies to 

(tm + t — to) 2 nm(m + 1) 
4(t - 1 ) > 2 
O m 2 (t 2 - 2n(t - to)) - 2m(t - t )(n - t) + (t - t ) 2 > 
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which indicates 

m > 



(t - t )(n - t) + yg - t ) 2 (n - t) 2 - (t 2 - 2n(t - t ))(t -trf 

t 2 - 2n(t - t ) 

(t - t ) (n - t + y/n(n - df) 

t 2 - 2n(t - t ) 
t-t 



n — y/n(n — d) — t 
We thus conclude that the optimal value of m is within the range 



t - to 

1 + 



n — \J n{n — d) — t. 



< m opt < 



t(2t - t) 
t 2 - 2n{t - to) 



(30) 



(31) 



It is worth noting that the LECC t, the multiplicity m and the y-degree P y are all irrelevant to 
the degrees of A(x) or B{x) individually. We ought to ensure there is no negative freedom terms with 
the above choice, which is easily verified by the fact that deg x w (Q(x, y)) + 1 — iw is always positive 
for i = 0,1,2,..., P y . 

We summarize the above discussions into the following lemma. 



Lemma 6 Let t satisfy (|28p . the multiplicity m be chosen as in (|29p and the y -degree P y of bivariate 
polynomial Q(x,y) as in (|23p . Then, all valid polynomials A(cc) • y — b(x) that pass through exactly 
t points are factors of the minimum (1, w)-weighted (where w is defined in (|17p ) degree polynomial 
Q(x,y) that passes through {(a~ l , yi)}^n (where yi is defined in (|16p ), each with multiplicity m. 

However, different values of e require different values of P y and m. We next show that for a given 
LECC t, it suffices to choose a unified value P y and m based upon the LECC t to identify all valid 
polynomials A(x) • y — b(x) corresponding to up to t errors. Since the degrees of freedom is independent 
of the actual number of errors, it is only left to show that 

(e - L A )P y + deg 1>w {Q(x,y)) = (e + t - 2t )P y + (t - t ) < em, 

where deg x w (Q(x, y)) satisfies ([22]) and m satisfies ([3TI|) . By assumption the above inequality holds 
when e = t, i.e., 

(2/ - 21 n) P.. ^ ^ 



(2t - 2tp)P y 
tm — t + to 



Therefore, it suffices to show 



(2t - 2tp)P y > (t + e - 2to)P y 
tm — t + to — em — t + to 
^ (t-e)P y {(t-2t )m + (t-to)) < 
t - to 



<^4> m > 



2to -t 



which holds true following (|30p and the fact 2to = d > n — \Jn{n — d). 
The following theorem wraps up the subsection. 
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Theorem 1 Let A(x) and B(x) be the error locator and correction polynomials, respectively, computed 
by the Berlekamp-Massey algorithm. For any given t satisfying (|28p . if we choose the multiplicity m as 
in ([29p and the y-degree P y of bivariate polynomial Q(x, y) as in (|23p . then the minimum (1, L\ — L x b)- 
weighted degree polynomial Q(x,y) that passes through each of n distinct points, {(a - *, Vi)}^^ (where 
yi is defined in (]16p ). with multiplicity m, contains all factors \{x)y — b{x) which pass through at least 
L\ but at most t out of n points. 

Remarks: The above theorem can be viewed as a generalization of Lemma 5 in [9] from polynomial to 
rational curve- fitting. Although we do not address this explicitly, the choice of weight of y in Q(x, y) 
is optimal in the sense of maximizing the LECC t. It optimally trades off between (|18j) and (|27p . 



Example 4. For the (15, 5) Reed-Solomon code, we have n — \J n(n — d) = 7.254. We consider 
correcting up to t = 7 errors. It suffices to choose the multiplicity m = |_ ^^2raft-l ) -l = ^' ^ e 
degree of y be chosen as P y = [_ 2t ^ f(1 j = 16, following (i23j) . and the degree of Q(x, y), deg l lu (Q(x, y)), 
as in ([2"2"]) , As a result, the degrees of freedom is (tm — P y (t — to))(P y + 1) = 425 whereas the number 

of linear constraints is nm(m + l)/2 = 420. The lower bound of m is 1 1 + ±=M I = 6. When 

m = 6, it can be verified that the maximum degrees of freedom and the number of constraints are 
both 315. Thus, m = 6 is not satisfactory and the optimal choice of multiplicity is m = 7. For the 
received words given in Examples 1 & 2, the minimum (weighted) degree bivariate polynomials Q(x,y) 
constructed with m = 7 and P y = 16 are presented in Example 3. In contrast, to achieve the same 
LECC t = 7, the Guruswami-Sudan algorithm requires multiplicity m = 16 with P y = 31 (recall that 
P y is a natural upper bound on the list size). □□ 

C. Rational Factorization 

In this section we apply rational factorization to obtain following the developments in [21,28]. 
However, our particular application is complicated by not knowing a priori the degrees of X(x) and 
b(x). 

Define 

>M = 1 ™ 

which is well defined, as indicated by Lemma [3] that b{x) and A(x) are coprime. We, thus, only need 
to determine f(x) to construct A*(x). Note that Ao = 1, as indicated by Lemma Consequently, 
f(x) can be expressed by an infinite-length non- negative power series 

\ K x ) 2 i 
J \ x ) = T7 — 7 = SO + SIX + S 2 X + . ..SiX + 

\(x) 

When Q(x, y) contains factors of the form y — f(x), we can obtain the infinite-length power series 
of the rational function f(x) through making use of the following factorization procedure [21,28]. 
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Rational Factorization Procedure 

0. Initialization: i = and Q(°\x,y) <— Q(x,y). 

1. Determine the roots of QW(0, y). 

2. For each root s, 

• Compute the shifted polynomial: Q^\x, y) <— Q^\x, s + y). 

• Transform and then remove x factors: Q(* +1 ) (x, y) <— QW (x, xy)/x a , where x a denotes the 
largest power of x contained as a factor in Q^\x,xy). 

3. Set i <— i + 1 and repeat Steps 1 and 2 for the derivative Q^\x,y) with respect to each root s. 

We proceed to show that a pertinent finite- length, say L s , power series of s(x) suffices to retrieve 
b(x) and X(x). Note we have 

= s{x) (mod x Ls ). (33) 



A(x) 

It can be efficiently solved by the Berlekamp-Massey algorithm given that L s is large enough, as 
demonstrated below. 

We first assume that the degrees of b(x) and X(x) are known a priori. When deg(6(x)) < deg(A(ar)), 
A(x) is then uniquely determined (upon normalization) by the Berlekamp-Massey algorithm (note that 
s(x) (mod x Ls ), X(x), and b(x) correspond to syndrome, error locator, and error evaluator polynomi- 
als, respectively), with L s = 2deg(A(x)). Note that the condition deg(6(x)) < deg(A(x)) implies 
<teg(A(s)) 

^j s i~j = 0, i = deg(A(x)), deg(A(x)) + 1, . . . , 2deg(A(x)) - 1. 

3=0 

Therefore, the LFSR length described by A(x) is L\ = deg(A(x)). 
When deg(6(x)) > deg(A(x)), let 



A(x) v ' A(x) 

where a(x) is a polynomial of degree deg(6(x)) — deg(A(x)) and the degree of b'(x) is less than that of 
A(x). Let ji = deg(6(x)) — deg(A(x)) and j2 = deg(6(x)) + deg(A(x)). We observe that A(x) generates 
the sequence (so — do), ■ ■ ■ , {sj 1 — fljx), s^+i, . . . , Sj 2 , consequently, its subsequence s^^+i, Sjr'i+2) ■ ■ ■ , 
Sj 2 . Therefore, A(x) can be uniquely determined (upon normalization) using the sequence Sj x +i, Sji+2, 
. . . , Sj 2 , and subsequently 6(x) is computed by following the equality 

b(x) = s(x)X(x) (mod x de s( fe W)+i). 

Clearly, in this case it suffices to compute the power series expansion of f(x) up to length L s = 
deg(6(x)) +deg(A(x)) + 1. 
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Because we do not know a priori the degrees deg(6(x)) and deg(A(x)), we have to take into account 
the worst cases. When deg(6(x)) =t — L x b and deg(A(x)) = 0, the Berlekamp-Massey algorithm has 
to start from the syndrome st-L xB +i, on the other hand, deg(A(x)) may be as large as t — La, hence 
the Berlekamp-Massey algorithm requires 2(t — La) syndromes in the worst case. Therefore we may 
safely set the length of s(x) to: 

L s = t - L xB + 1 + 2{t - L A ) = 3/ + 1 - 2t - L A . (34) 

We thus obtain A (a;) by applying the Berlekamp-Massey algorithm which starts from the syndrome 
St-L xB +i and iterates 2(t — L A ) times. Thereafter, we compute b(x) via 

b(x) = s(x)X{x) (mod x*- L * s+1 ). (35) 

After we have determined the error locator polynomial A'(x) = A(x)A(x) + xB(x)b(x), we can 
subsequently identify all error locations and apply Forney's formula to compute the corresponding 
error magnitudes [4]. 

Example 5. (i). For the bivariate polynomial Q(x,y) constructed in Example 3.(i), applying the 
proposed rational factorization returns three candidate rational functions. 

(1) . A(x) = 1 + ax + a 2 x 2 and b(x) = a + a 2 x. The candidate error locator polynomial is constructed 

A' (:r) = X(x) • A(x) + b(x) • xB(x) 

= 1 + a 9 x + a 5 x 2 + a 10 x 3 + q 4 x 4 + a 7 x 5 + x 6 + a 4 x 7 

= (1 - x)(l - a 3 x)(l - a 6 x)(l - a 7 x)(l - a 10 x)(l - a n x)(l - a 12 x) 

which produces the following candidate codeword 

c= [a 2 , q 6 , a 10 , a 8 , a 7 , a 5 , a 6 , a 12 , a, a 2 , a 3 , a 9 , a 9 , a 7 , a]. 

(2) . A(x) = 1 + a 12 x and 6(x) = a 7 . The candidate error locator polynomial is constructed as 

A' (X) = 1 + «V + a A x 2 + a 5 x 3 + a 2 x A + aV + a 10 x 6 
which has less than 6 distinct roots in GF(16) and thus is spurious. 

(3) . X{x) = 1 + ax + a 2 x 2 and b(x) = a s . The corresponding candidate error locator polynomial is 

A' Or) = 1 + aV + a 11 ^ 3 + «V + a 12 x 6 + a 6 x 7 

= (1 - ax){\ - q 3 x)(1 - a 6 x)(l - a 8 x)(l - a 9 x)(l - a n x)(l - a 13 x) 

which successfully retrieves the transmitted codeword 

c= [0, a 12 , a 10 , a 11 , a 7 , a 5 , a 11 , a 11 , a 6 , a 8 , a 14 , a 11 , a 6 , a 2 , a]. 
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(ii). For the bivariate polynomial Q(x,y) constructed in Example 3.(ii), applying the proposed 
rational factorization returns one candidate rational function: A(x) = 1 and b(x) = a 12 + a 10 x + 
a 4 x 2 + a 7 x 3 . Consequently, the candidate error locator polynomial is constructed 

A'O) = A(x) • A(x) + b(x) ■ xB(x) 

= 1 + a 5 x + a 4 x 3 + a 14 x 4 + a 8 x 5 + a 12 x 6 + a 14 x 7 

= (1 - ax)(l - a 4 x)(l - a 7 x)(l - a 8 x)(l - a 12 x)(l - a 13 x)(l - a 14 x) 

which produces the original codeword. It also verifies LemmaUl(i), that there does not exist codewords 
within distance 6 from the received word. □□ 

D. Algorithmic Description and Performance Assertion 

We summarize the complete list decoding algorithm and its characterization as follows. 



List Decoding Algorithm for Reed-Solomon Codes 

0. Initialization: Input code length n, information dimension k, and LECC t satisfying t < n — 
\/n{n — d). Initialize the multiplicity m based on (129j) . then greedily optimize it subject to the 
constraint (f!5|) . subsequently choose the y-degree P y as in (f2"5j) . 

1. Input the received word and compute syndromes. 

2. Apply the Berlekamp-Massey algorithm to determine A(x) and B(x). If L\ > t then declare a 
decoding failure. 

3. Perform error correction and evaluate yi = — a -^^ a -i^ , i = 0,1,2, ... ,n — 1. 

4. If L x b > t, then return the corresponding unique codeword when A(x) has L\ valid roots, 
otherwise declare a decoding failure. 

5. Apply the rational interpolation procedure to compute a (1, L\ — L x £)-weighted-degree polyno- 
mial Q(x,y) that passes through {(a~ l , j/i)}"_ , each with multiplicity m. 

6. Apply the rational factorization process to obtain finite-length power series s(x) (mod x Ls ) of 
the rational functions tt^t- 

7. For each finite-length power series s(x) (mod x Ls ), do: 

• Apply the Berlekamp-Massey algorithm to determine A(x). 

• Compute 6(x) = s(x)A(x) (mod x t ~ LxB+1 ). 
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• Construct A'(x) = X(x) ■ A(x) + b{x) ■ xB(x). 

• Determine the distinct roots of A'(x) within {a"*}™^ 1 . 

• Compute error magnitudes using the Forney's formula if the number of distinct roots is 
equal to the degree L\l 

8. Return the list of codewords which are within distance t from the received word. 

Theorem 2 Let a LECC t satisfy (|28p . // the multiplicity m is chosen as in (|29p and subsequently 
the y-degree P y as in (|23p . then the proposed list decoding algorithm produces all codewords within 
distances t from a received word. 

Remarks: The proposed list decoding algorithm can be applied to the decoding of generalized 
Reed-Solomon codes, and error-and-erasure decoding using the method in [8]. 
Let t opt denote the achievable LECC 

t op t = \n - 1 - y/n{n - d)] . (36) 



Corollary 1 The number of codewords that lie within (strictly less than) Hamming distance n 



■\Jn(n — d) from a received word is 0(n — \Jn{n — d)). 

Proof: The number of such codewords is upper bounded by the degree P y that corresponds to t = i opt . 
Substituting (|2T?|) into (|2"5"1) . we further obtain 



Py = O 



o 



topt topt(d ^opt) 



2t op t - d t% pt - nt op t + ndj 

topt topt(d topt) 



O 



O 



2t opt -d (n - ^n(n - d) - t opt )(n + y / n(n - d) - t opt ) 

topt ^opt(2to — ^opt) \ 

2t op t — d n + ^Jn(n - d) - t opt J 



n 



\J n(n — d) (n — ^n(n — d)){d — (n — \J n(n — d))) 



2n — 2 \J n{n — d) — d n + \/n — d — (n + \Jn(ji — d)) 



On 



y/n(n - d)^j 



as desired. 

We next justify the treatment of the term n — ^Jn{n — d) — t opt as 0(1). Indeed, n—y/n(n — d) — t opt 
can be arbitrarily small with appropriate choices of n. However, if we replace t op t by 



t' = [n - yjn(n - d) - 0.5J , 
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then we immediately have 0.5 < n — y n(n — d) — t' < 1.5, i.e., n — \Jn{n — d) — t' = 0(1). On 
the other hand, we have < i Q pt — i' < 1, in which difference by 1 can be safely ignored in light of 
asymptotic behavior. □□ 
Remarks: In [9], the product term (n — y / n(n — d)—t opt )(n+^/n(n — d)—t opt ) is regarded as constant 
0(1), which results in a quadratic bound 0(Vkn 3 ) for list size, which otherwise is a linear term as 
well. Given a LECC t < n — \Jn{n — d) for (n, k) Reed-Solomon code, the explicit construction of 
the Guruswami-Sudan algorithm is given in [9]: 



P„ 



n 



If, w , | n(n -d) + Jn 2 {n - d) 2 + 4((n 
(n-t)(l+L ' 



t) 2 -n{n-d)) 



d\ x '" " JK ~ ' L 2((n - t) 2 - n(n - d)) 

whereas the explicit construction of the proposed algorithm shows 



J) 



t 



2t - 2t 



t(2t - t) 
t 2 - 2n(t - t Q ) 



Figures [2] and [3] shed some light on the tightness of the list size bound between the two algorithms. 
Note that due to integer precision, it is possible that under a fixed multiplicity m, larger LECC t 
causes smaller list size, specifically, let t and t' , t < t' be permissible for the same m, then it holds 

I tm 

L2(t-t )J - l 2(t'-t ) 

multiplicity m applies. 

Ignoring the integer precision, the ratio p 
is expressed as 

p y,GS 



— \- 2(f—to) ^ ' ^° enc ^' ^ e mmmium value should be chosen in the range where the same 
n applies. 

with respect to the LECC limit t = n(l - VI - D) 
1 



P, 



j/,prop 



i_ JT^D' 



t=n(l-^/T^D) 

which reveals that the derivative bound of the proposed algorithm is universally tighter than that of 
the Guruswami-Sudan algorithm on the boundary of the optimal LECC, as illustrated in Figured! 
Finally, we clarify that the above results are consistent with the work in [13,22], in which the list-/ 
Guruswami-Sudan bound is shown to be tight only when the algorithm degenerates to the classical 
(list-1) hard-decision decoding. 



E. Complexity Analysis 

Finally we analyze the computational complexity in terms of field operations, assuming n and k are 
large enough and the field cardinality q < 2 n (which is used to bound the factorization complexity, 
as discussed in [9]). Following the convention, we will fix the normalized minimum distance D = d/n 
while letting n (and d) go to infinity. Our particular interest lies in the case of the achievable LECC 



27 



i opt which is defined in ([36]) . In this case, the multiplicity chosen in ([29]) simplifies to 

topt(d — t op t) \ 



m = O 

= O 

= O 

= O 

= O 



t* pt - 2nt opt + nd 



t Q pt{d — t pt) 



(n - yjn{n - d) - t opt )(n + y/n(n - d) - t opt ) 
topt (d — t pt ) \ 



n 



+ y/ n(n — d) — t 



opt 



(n — \Jn{n — d))(d — in — \J n(n — d)) 



2\Jn[n — d) 



n 



Vn — d^j 



To the best of our knowledge, the up-to-date most efficient interpolation technique is through the 
Koetter updating procedure which exhibits complexity 0(N 2 ) with N linear constraints [15,18]. To 
achieve optimal performance, the number of constraints is of the order 0(nm 2 ) = O (n(y/n — V^) 4 ^ • 
Thus, we have the following characterization regarding the interpolation complexity. 

Lemma 7 The rational interpolation of the proposed list decoding algorithm can be implemented with 
the complexity of 

O fn 2 {^-Vn~^d) 8 ^j 
to achieve the LECC t op t = \n — 1 — y/n(n — d)~\ . 

We next analyze the complexity of the proposed factorization procedure, following the development 
in [21]. Note the length of s(x), which is factorized and used in the Berlekamp-Massey algorithm to 
obtain X(x) and b(x), is bounded by 

3t - 2t - deg(A(x)) < 3t - 2t - deg(A(x)) + (t - L xB ) = 4(t - to). 

In [17], it is shown that the roots in GF(g) of a polynomial of degree u can be found in expected time 
complexity 0(u 2 ■ log 2 u ■ logg). We observe that in each iteration "W" the degrees of the polynomials 
Qj (0,y) satisfy Ylj deg(Q^(0,y)) < P y (See Lemma 6.2 in [21]). The root-finding complexity in one 
iteration is then bounded by 



X>(deg 2 (Q5 l) (0,y)) • log 2 deg(Qy ) (0,y)) • log?) < 0{P 2 ■ log 2 P y ■ log?). 
j 

Thus, the computational complexity of determining roots of Q(0, y) in up to 4(t — to) iterations is 
bounded by 

O {{t - t Q )-P 2 - log 2 P 2 -\ogq). 
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We now analyze the shift operation Q^ l \x,y) <— Q <yl \x,y + Sj). Lemma 6.2 in [21] indicates 
that the step Q^ +1 \x,y) <— Q^\x, xy)/x a , where x a denotes the largest power of x which divides 
Q^(x,xy), results in 

deg (Q (i+1) (0,2/)) < a < h < deg (q W (0,2/)) , 

where h denotes the multiplicity of the root Si of Q^ l \0,y). Hence, the parameter a is non-increasing 
with iterations going on. Therefore, it suffices, in each iteration, to update the first 4a(i — to) terms 
of [y l ]Q^\x, y), I = 0, 1, 2, . . . , P y , in order to determine the first 4(t — to) terms of s(x). Since each 
term can be updated with 0(P y ) operations, the corresponding complexity in one iteration is 

• (t - t )P 2 < ^4deg(Qf (0,y)) • (t - t )P 2 = O ((t - t )P^ . 

3 3 

and thus the resulting overall complexity is O ((i — to) 2 Py). 

Finally, since there are at most P y candidate polynomials s(x), it takes 0(P y (t — to) 2 ) operations 
to compute the corresponding X(x) and b(x) through the Berlekamp-Massey algorithm. Clearly, the 
overall complexity of the proposed factorization procedure is dominated by the shift operation with 
the complexity of 

O {(t - tofPl) = O (n 3 / 2 (y^ - V^d) 7 ) . 
Therefore, we characterize the complexity of the factorization procedure as follows 

Lemma 8 Given that the field cardinality is at most 2 n , the rational factorization procedure of the 
proposed list decoding algorithm can be implemented with the complexity of 

0(n 3 / 2 (y^- V^d) 7 ) 

to achieve the LECC t opt . 

The following theorem summarizes the complexity of the proposed algorithm. 

Theorem 3 Given that the field cardinality is at most 2 n , the proposed list decoding algorithm exhibits 
the computational complexity in terms of field operations 

0(n 2 (^n~- v^d) 8 ) (37) 

to achieve the LECC t op t = \n — 1 — ^Jn{n — d)~\ . 

Remarks: Note that the multiplicity dictates the complexity. It is insightful to also compare the 
minimum multiplicities between the Guruswami-Sudan algorithm and the proposed algorithm. For an 
intermediate < t < n — \J n(n — d), the value of multiplicity given in [9] is, under our notations, 

n(n - d) + J(n 2 (n - d) 2 + 4((n - t) 2 - n(n - d)) 

mGS = 1 + ^772 — o 7T T\ 

2{t z — 2nt + nd) 
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Figure 2: Multiplicity and list-size-bound as functions of list error correction capability for the (255, 
112) Reed-Solomon code. 

whereas the value of multiplicity of the proposed approach is given in (|29p . i.e., 

2(t-t ){n-t) 



m 



prop 



1 + 



t 2 - 2nt + nd 

(recall that the above m prop is a sufficient value but not necessarily the minimum/optimal value, as 
indicated in (J2U)-) 

Figures [2] and [3] plot the above two multiplicity functions for the (255, 112) Reed-Solomon code 
and the (2047, 1647) Reed-Solomon code, respectively. We observe in Figure [31 where the code rate is 
0.8, that to correct extra five erroneous symbols, the proposed algorithm requires multiplicity m = 1, 
whereas the Guruswami-Sudan algorithm requires multiplicity m = 143; to achieve the LECC limit 
of correcting extra 11 errors, the former requires the multiplicity m = 26, whereas the latter requires 
m = 2197. 

We further consider the ratio ™ as with respect to the LECC limit t = n(l — \/l — D), which is 
expressed as 

n(n - d) y/l-D 



m 



prop 
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Figure 3: Multiplicity and list-size-bound as functions of list error correction capability for the (2047, 
1647) Reed-Solomon code. 

(Note the integer precision is not taken into account in the above equality.) It is plotted in Figured] 
as a function of normalized minimum distance D. Evidently, the proposed algorithm reduces the 
(required) multiplicity (to achieve the optimal LECC) by orders of magnitude. 

F. An Alternative Perspective 

In the above we have characterized the multiplicity m with respect to a fixed LECC t as in (|31|) . and in 
particular, its asymptotics with respect to the maximum LECC i pt as in (|37|) . In this subsection, we 
characterize the LECC with respect to a fixed multiplicity and show that the derivative algorithm has 
quadratic complexity which is identical to that of the Berlekamp-Massey algorithm. To simplify our 
analysis we will treat P y , and subsequently deg lw (Q(a;, y)), as real numbers. Indeed, this treatment 
reveals many fundamental insights. 

Note that the degrees of freedom is maximized to 

(tm + t- t ) 2 
max{AW = 4(< _ - 



31 




Figure 4: The ratio of multiplicity and list-size-bound of the Guruswami- Sudan algorithm to that of 
the proposed algorithm in achieving the limit of list error correction capability. 

associated with P y = ^^r^y- Consequently, the constraint max{iVf ree } > N cstr with respect to a 
fixed multiplicity m is reduced to 

(tm — t + to) 2 nm(m + 1) 

4(t - 1 ) > 2 ' (38) 

which simplifies to 

t 2 (m + l) 2 - 2t(m + l)(t + ran) +t% + 2t nm(m + 1) > 0. 

Solving, we obtain 



1 m 

t < rto + 



- (n - y/n(n - d)) . (39) 



m + 1 m + 

It indicates that, the practical LECC gain can be achieved with very small constant multiplicity, 
irregardless of the code length n, and particularly, half the LECC gain is achieved with multiplicity 
m = 1. 
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Recall that the above LECC is achieved with P y set to 

_ tm — t + tp 

v ~ 2(t-t„) 

D m — 1 

= (i_vT^Td)2 + (40) 

where the second equality is obtained by substituting t with the limit in (|39p . It indicates that the 
list size is upper bounded by a constant for a fixed normalized minimum distance D, regardless of 
code length n. Figure [6] also reveals that the bound increases when the distance D decreases, although 
the algorithm itself becomes less and less powerful. On the other hand, the algorithmic complexity is 
quadratic following the step-by-step analysis of the preceding subsection, fundamentally attributed to 
a constant upper bound on the list size. 

The above two-fold facts immediately reveals the following fundamental insights 

Theorem 4 For arbitrarily small e > 0, the list decoding up to the LECC 



e ■ t + (1 - e) • (n - y/n(n-d))\ (41) 

can be achieved by the proposed algorithm with multiplicity m = [_-J, whose complexity is quadratic in 
nature, 0(n 2 ). 

Remarks: (i). Even if m = 1 the proposed algorithm universally outperforms the conventional hard- 
decision decoding, as shown in Figure in contrast to the Sudan algorithm, where the improvement 
is observed only when the code rate ^ < | [25]. (ii). The list size of candidate codewords is upper 
bounded by a constant arbitrarily close to the LECC limit n — yjn(n — d). However, the list size may 
be as large as superpolynomial slightly beyond the LECC limit, as explicitly constructed in [11]. 



IV. Improved List Decoding Algorithm for Binary BCH Codes 

In this section we investigate the list decoding of the narrow-sense binary BCH codes. It is straightfor- 
ward to apply the algorithm in the preceding section to the decoding of a binary BCH code and obtain 
the inherent LECC to be n(l — yl — D), where D denotes the normalized designed minimum dis- 
tance. In the following we present an improved list decoding algorithm for the binary BCH codes that 
achieves the Johnson bound for the binary codes §(1 — vl — 21?), which gives a general lower bound 
on the number of correctable errors using small lists for any code, as a function of the normalized 
minimum distance of the code [12]. 

The following lemma identifies a special feature of binary BCH codes. Its proof follows from 
Lemma [3] and the particularity of the Berlekamp algorithm. 
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Figure 5: Normalized (list) error correction capability as a function of the normalized minimum 
distance on decoding Reed-Solomon codes. 

Lemma 9 Let A* (a;) be the true error locator polynomial as defined in ([2]). Let A(x) and B{x) be the 
error locator and correction polynomials, respectively, obtained from the (re-formulated) Berlekamp 
algorithm. Then, A*(x) exhibits the form of 

A*(x) = A(x) • X*(x 2 ) + x 2 B{x) ■ b*(x 2 ), (42) 

where the polynomials A* (x) and b* (x) exhibit the following properties: 
(*). A5 = 1; 

(u). ifb*(x) = 0, then \*(x) = 1; 
{Hi). X*(x) andb*(x) are coprime; 

(iv) . 2deg(A*(x)) = deg(A*(x)) - L A and 2deg(6*(x)) < deg(A*(x)) - L X 2 B , or 
2deg(A*(x)) < deg(A*(x)) - L A and 2deg(6*(x)) = deg(A*(x)) - L X 2 B ; 

(v) . i/deg(A*(x)) < d, then \*(x) and b*(x) are unique; 

We proceed to incorporate the special form (|42p into the rational interpolation process to optimize 
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Normalized Minimum Distance 



Figure 6: The bound on the list size with multiplicity m = 1. 

the LECC. Define 

Ma- 1 ) , s 

y* = -^B(^ry • = 0-1.2,...,n-l. (43) 

Note we are interested in determining the form of y\(x 2 ) — b(x 2 ), so we naturally assign the weight of 
y to be 

w = L A - L X 2 B , (44) 
which is always odd since L\ + L x i B = d is odd. 

Lemma 10 Let A(x) and B{x) be the error locator and correction polynomials, respectively, obtained 
from the (re-formulated) Berlekamp algorithm. Let Q(x,y) be a bivariate polynomial passing through 
all n points {(l,yo)> ( a ~ 2 >2/i); (a™ 4 , 2/2); {a~ 2<yTl ~ l \ y n -i)} (where yi is defined in (|4"3"]l }. each with 
multiplicity m. If 

{t-L A )P y + deg 2 , lv {Q(x,y)) < 2tm, (45) 

where P y denotes the power of y in Q(x,y) and deg 2tW (Q(x,y)) (where w is defined in ( j34"|) ) denotes 
the (2, w)- weighted degree of Q(x,y), then Q(x 2 ,y) contains all factors of the form y\(x 2 ) — b(x 2 ) 
which pass through t (t > La^ points. 
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Proof: Let yX(x 2 ) — b(x 2 ) be a polynomial passing through t out of n points, {(l,yo)> (<* 
(a -2 , 2/2)) • • • , {pT^ n ~ l \ y n _i)}, and (a~\yj) be one of points. Let 

A 6((x + q-*) 2 ) fe(x 2 + a' 2 *) 

~ A((x + cH) 2 ) ~ ^ ~ A(x 2 + a" 2i ) " ^ 
where the second equality is due to the field of characteristic of 2. Then p(0) = and moreover p(x) 
must be in the form of 

p(x) = x 2 p'(x), 

where p'(x) contains no pole of zero. We next show that (x — a~ l ) 2m divides the following polynomial 

b{x 2 ) 



g{x) = X^{x 2 )Q[x\ 
To this end, consider 

g'{x) = X p y(x 2 + a~ 2i ) ■ Q®(x 2 ,p(x)), 
where Q^\x,y) is the shift of Q(x,y) to (a~ 2 \yi). Consequently, 

g(x) = X p y(x 2 )Q^(x 2 + a- 2 \ -^y—Jr — y% 



' X(x 2 ) 

= X p y(x 2 )Q {i) (x 2 + a~ 2i , p{x-a- 1 )) =g'{x-a- 1 ). 

By construction, Q^ l \x,y) has weighted degree less than m. Thus, plugging in p(x) = x 2 p'(x), we 
conclude that (x — a~ % ) 2m divides g(x). Therefore, g(x) is a polynomial that contains at least 2tm 
roots, i.e., all roots of A*(x) each with multiplicity 2m. The remaining proof trivially follows that of 
Lemma [5j □□ 
Note that the degrees of freedom in Q(x,y), given the degrees deg 2 w (Q(x, y)) and P y , is 

V (1 + ^ deg2 ' w ^ x,y ^ ~ iw \ \ > V (1 + deg2 ' w ^ x,y ^ ~ iw ~ 1 

i=0 ^ " ' i=0 ^ ~ 

_ (deg 2tW (Q(x,y)) + 1 - P y w/2)(P y + 1) 
2 

Define 

A , L\ + L X 2 B d 
t = L A - w/2 = = -. 

Note that the above definition is consistent with the case of Reed-Solomon codes. 

We next maximize the lower bound of Nf rcc , ^ dcg2 ' w ^ x ' y ^ + ^ p v w l 2 ) < y p y +l ) ^ SUD j ec ^ to fixed number 



of errors t, fixed multiplicity m and the zero constraint (j35 

(deg 2tW (Q(x,y)) + l-P y w/2)(P y + l) ^ 1 

2 



< -(2tm-Py(t-t ))(Py + l) 



_t-tp 2 2Jrn-t + to 
2 v 2 v 

t-t ( _ 2tm-t + t \ 2 {2tm + t - t ) 2 
2 V V 2(t-t„) J 8(t-t ) 1 ) 
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where "=" in the "<" is achieved if and only if 

deg 2)W (Q*(x,y))=2tm-l-P y (t-L A ). (47) 
We note that the maximum degrees of freedom is achieved by choosing P* to be the closest integer 

2tm — t + to 



, 2tm-t+t ■ 
LU 2t-2t ' 



p* 
1 V 



+ 0.5 





tm 




t-to 



2t - 2t 

Therefore, the maximum degrees of freedom has the following lower bound 

t - t (2tm + t - t ) 2 _ t 2 m 2 + tm(t - t ) 
8" + 8(t - 1 ) ~ 2(t - 1 ) ' 

Hence, to solve for the linear equation system, it suffices to enforce 

t 2 m 2 + tm(t — to) nm(m + 1) 



2(t - 1 ) 



> 



(48) 



(49) 



(50) 



which is equivalent to 



m 2 (t 2 - n(t - t )) - m(t - t ){n - t) > 0. 



The above condition holds true for sufficiently large m if and only if 

t 2 - n(t - t ) > 0, 
which indicates the following limit of LECC 



t < 



n 



■\Jn(n — 4io) n — \Jn{n — 2d) 



(51) 



It is always superior to the inherent LECC n — ^Jn{n — d), following the fact 



n — sj n{n — 2d) 



n — \J n(n — d) 



to^/n 



to\/n 



2 \ 'J ^Jn — d + — 2d y/n + y/n — d 

When (|5ip is satisfied, we may choose the multiplicity m to be 



> 0. 



m 



(t-t )(n-t) 



+ 1 



tto 



t 2 - n(t - t ) 



(52) 



t 2 - n(t - t ) 

The following presents the "lossless" maximization of the degrees of freedom conditioned on the 
fixed t and m. It can be easily verified that the degrees of freedom is bounded by 



(<leg 2 JQ(x,y)) + l-P s w/2)(P t + l) P y 1 



i=0 



deg 2 , w (Q(a;,2/)) - iw 



(deg 2;W (Q(x, y)) + l- P y w/2)(P y + 1) P y 
2 4 ' 
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Due to the integer constraint, it suffices to treat and optimize the degrees of freedom as follows 
(deg 2>w (Q(x,y)) + 1 - P y w/2)(P y + 1) P y 

iV free - ^ h ~£ 

<l(2tm-P y (t-t ))(P y + l) + ?f 

t-t / 2tm-t + t + 0.5\ 2 (2tm-t + t + 0.5) 2 
= 2( t - t0 ) ) + +tm (53) 

where "=" is achieved by choosing deg 2 w (Q(x, y)) as in ([4"T|h Evidently, the optimal choice of P y is 
as follows, 

2tm-t + t + 0.5 im + 0.25 

p * = L 2 (t - t0 ) + °- 5 J = rr^\ ' (54) 

which is slightly different from (|48p . Consequently, the optimal multiplicity m is the minimum one 
that complies with the following constraint 



t-t 



tm + 0.25 
*-*o 



2tm-t + t + 0.5\ (2tm-t + t + 0.5) 2 nm(m+l) , , 
' + - : ^- — + tm> -. (55) 



2{t-t ) J 8(t-t ) 2 

We are ready to present the complete list decoding algorithm for binary BCH codes as follows. 
List Decoding Algorithm for Binary BCH Codes 



0. Initialization: Input code length n, minimum distance d, and LECC t satisfying t < | yn — y/n(n - 
Initialize the multiplicity m based on (|52p . then greedily optimize it subject to the constraint 
(l55j) . subsequently choose the y-degree P y as in (f54"|) . 



1. Input the received word and compute syndromes. 

2. Apply the Berlekamp algorithm to determine A(x) and B(x). If L\ > t then declare a decoding 
failure. 

3. Perform error correction and evaluate y% = — a ^ii%^-i^ ? i = 0, 1, 2, . . . , n — 1. 

4. If L x 2g > t, then return the corresponding unique codeword when A(x) has precisely L\ valid 
roots, otherwise declare a decoding failure. 



5. Apply the rational interpolation procedure to compute a (2, L\ — L a .2 B )-weighted-degree poly- 
nomial Q(x,y) that passes through {(a -2 *, yj)}^ 1 , each with multiplicity m. 

6. Apply the rational factorization process to obtain finite-length power series s(x) (mod x Ls ) of 
the rational functions tt-t- 

7. For each finite-length power series s(x) (mod x Ls ), do: 

• Apply the Berlekamp-Massey algorithm to determine A(x). 
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• Compute b(x) = s(x)X(x) (mod x t ~ L ^ 2 B +1 ). 

• Construct A'(x) = X(x 2 ) • A(x) + b(x 2 ) ■ x 2 B(x). 

• Determine the distinct roots of A'(x) within {a - *}^^ 1 . 

8. Return the list of codewords which are within distance t from the received word. 

We summarize the above discussions into the following theorem 

Theorem 5 For a given (n, k, d) BCH code, let the LECC t satisfies (I5ip and the multiplicity m be 
chosen as in ()52p . then the proposed list decoding algorithm produces all codewords up to distance t 
from a received word. 

Remarks: The LECC limits of the proposed algorithm and the Guruswami-Sudan algorithm are 
illustrated in Figure [TJ The proposed performance matches the Johnson bound for binary codes [12]. 
The proposed performance also demonstrates the tightness of the improved bound of the list size in [7]. 

Following the step-by-step complexity analysis in the preceding section, we characterize the com- 
plexity of the proposed algorithm as follows 

Theorem 6 Given that the field cardinality is at most 2 n , the proposed list decoding algorithm for 
(n,k,d) binary BCH codes exhibits the computational complexity in terms of field operations 

O (n 2 (^n~ - Vn - 2d) 8 ) (56) 



to achieve the maximum LECC t op t = \ n V n ( n _^Q _ _ 

We proceed to characterize the proposed list decoding algorithm with respect to a fixed multiplicity 
m. For the conciseness of analysis, we treat the degrees of freedom to be ^(deg 2 W (Q(%, y)) + 1 — 
P y w/2)(Py + 1), and P y as well as deg 2 w (Q(x, y)) to be real numbers. Following ([15]) . the maximum 
degrees of freedom is 

(2tm + t - t ) 2 



max{iVf r ee} 



8(t - 1 ) 



which is achieved by choosing P y = ^mE^y 3 • Subsequently, the constraint of more degrees of freedom 
than the number linear constraints is reduced to 

(2tm -ft — t ) 2 nm(m + 1) 



8(t - t ) 

which is re-organized in decreasing order of t 

t 2 (2m + l) 2 - 2i((2m + l)t + 2m(m + l)n) +4 + 4t (m + l)mn > 0. 
Solving, we obtain the following LECC limit with respect to the fixed m 



(2m + X)to + 2m(m + l)n — 2m,\J n 2 (m + l) 2 — nd(m + l)(2m + 1) 
t < (2m + 1) 2 • (57) 
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It can be shown that 



(2m + l)t + 2m(m + l)n - 2m v / n 2 (m + l) 2 - nd(m + l)(2m + 1) 

(2m + l) 2 

1 2m n — Jnin — 2d) , . 

> 2^TT' t » + 2S7TT H (58> 



On the other hand, we have 

2tm — t + to 
y= 2(t-t ) 



< 



fOrr, 1U 1 4 i 2m n-y/n{n-2d) \ 

y lm - 1 > \ + 2 J + *0 

2 f , 4m n-y/n(n-2d) , 

2m+l t0 2m+l 2 a 

2D 2m -1 , cn . 

+ - 7===, (59) 



(1 - VI - 2D) 2 I- VI -2D 

which indicates that the list size is upper bounded by a constant with respect to a given normalized 
minimum distance D. We characterize the above discussions into the following theorem. 

Theorem 7 For arbitrarily small e > 0, the list decoding of the (n, k, d) binary BCH code up to the 

LECC . . 

n — y/n(n — 2d) 



e • to + (1 - e) 



(60) 



can be achieved by the proposed algorithm with multiplicity m = [^J , whose complexity is quadratic 
in nature, 0{n 2 ). 

Example 6. Consider the (63, 18, 21) BCH code. Its conventional error correction capability is 
10. The achievable LECC of the Guruswami-Sudan algorithm is [63 — \/63 x 42 — 1] = 11, whereas 
that of the proposed algorithm is |" 63 ~V63x 2i _ _ ^ rp Q correc ^ U p to t = 13 errors, the multiplicity 
and the degree of y are set as follows. Let the multiplicity be m = L 13 :j_63x (13-11 5) J = H' following 



52]) . which turns out to be optimal. Let the y degree be P y = L ^prr#Ep ] = 57, following (08]), which 



-63x (13-11.5) 

25 

V L 13-10.5 

also turns out to be optimal. We next walk through a simulation example to illustrate the algorithmic 
procedure. Let the prototype codeword be 

c = [1,1,0,0,0,1,0,1,0,0,1,0,1,0,1,1,0,0,1,1,0,1,1,0,1,0,0,1,0,1,1, 
0,1,0,0,1,0,1,1,0,0,0,1,1,0,1,1,1,0,1,0,0,0,0,0,0,0,1,1,0,1,1,0] 

and the received word be 

r = [1,1,0,0,1,1,0,0,0,0,1,0,1,0,1,1,1,1,1,0,1,1,1,0,1,0,0,1,0,1,1, 
0,1,1,0,1,0,1,1,0,0,0, 1,1,0,0,0,0,0, 1,1,0,0, 1,0,0,0,1,1,0,0, 1,0 ] 
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which has 13 erroneous bits. The true error locator polynomial is 

A*(x) = (1 - a 4 x)(l - a 7 x)(l - a 16 x)(l - a 17 'x)(l - a 19 x)(l - a 20 x)(l - a 33 x)(l - a 45 x) 
(1 - a 46 x)(l - a 47 x)(l " a 50 x)(l - a 53 x)(l - a 60 x) 

= 1 + a 29 x + a 23 x 2 + a 37 x 3 + ^4 + ^5 + ^6 + ^7 + ^8 + ^9 

+a 35 x 10 + ax u +a 12 x 12 + a 3 \ 13 . 

The Berlekamp algorithm outputs the following pair of error locator and correction polynomials 

A(x) = 1 + a 29 x + a 16 x 2 + a V + aV + a 4 V + a 6 x 6 + a 4 V + a 27 x 8 + a 19 x 9 + a 3 V° 
£(x) = a 2 + a 31 x + a 23 x 2 + a 50 x 3 + a 51 x 4 + a 42 x 5 + a 53 x 6 + a 5 V + a 32 x 8 + a 15 x 9 . 

In this case, the weight of y is set tow = L\ — L X 2 B = — 1. The following lists the n = 63 interpolation 
points {(a"* ^k)}f=o-- 



(1, 


a 57 ) 


(a 


-2 


a 19 ) 


(a 


-4 

> 


a 54 ) 


(aT 


-6 


Q 35 ) 


(af 


-8 


a 13 ) 


(a~ 


10 


a 38 ) 


(a 


-12 


a 48 ) 


(a 


-14 


a 46 ) 


(af 


-16 




(a 


-18 


a 49 ) 


(a 


-20 


a 52 ) 


(a - 


22 


a 58 ) 


(a - 


-24 




(a~ 


26 


a 34 ) 


(a 


-28 


a 45 ) 


(a 


-30 


a 31 ) 


(a' 


-32 


a 5 ) 


(a 


-34 


a 44 ) 


(a 


-36 


a 45 ) 


(a - 


-38 


a 3 ) 


(a - 


-40 




(a~ 


42 


a 61 ) 


(a 


-44 


a 62 ) 


(a 


-46 

i 


a 30 ) 


(a" 


-48 


a 31 ) 


(a 


-50 


oo) 


(a 


-52 


a 49 ) 


(a - 


-54 


a 8 ) 


(a~ 


-56 


a 35 ) 


(a" 


58 


a 41 ) 


(a 


-60 


a 57 ) 


(a 


-62 


a 4 ) 


(af 


-1 

> 


a 45 ) 


(a 


-3 


a- 17 ) 


(a 


-5 


a 34 ) 


(a - 


-7 


a 5 ) 


(af 


-9 

1 


a 16 ) 


(a~ 


11 

1 


a 62 ) 


(a 


-13 


a 7 ) 


(a 


-15 


a 47 ) 



(af 


-17 


a 26 ) 


(a" 


-19 

> 


a 8 ) 


(af 


-21 


oo) 


(a" 


-23 

> 


a 12 ) 


(af 


-25 


a 54 ) 


(a" 


-27 


a 38 ) 


(a 


-29 


a 11 ) 


(a- 31 


(af 


-33 

; 


a 62 ) 


(a" 


-35 


a 8 ) 


(af 


-37 


a 59 ) 


(af 


-39 


a 8 ) 


(a~ 


-41 


a 30 ) 


(a" 


-43 


a 53 ) 


(a 


-45 


a 12 ) 


(a- 47 


(af 


-49 

; 


a 44 ) 


(a" 


-51 

> 


a 15 ) 


(a' 


-53 


a 49 ) 


(a" 


-55 


a 26 ) 


(a 


-57 


a 57 ) 


(a" 


-59 


a 5 ) 


(a 


-61 


a 48 ) 





Rational factorization returns three candidate rational functions. 

(1) . X(x) = 1 + a 15 x and b(x) = a 31 + a 24 x. The candidate error locator polynomial is constructed as 

A'(x) = A(x 2 ) • A(x) + 6(x 2 ) • x 2 5(x) 

= 1 + a 2 \ + a 59 x 2 + a 38 x 3 + ^4 + ^5 + ^6 + ^7 + ^8 + ^9 + ^10 

+a 5 V 1 +a 6 x 12 +a 37 x 13 
= (1 - a 4 x)(l - a 7 x)(l - a 16 x)(l - a 17 x)(l - a 19 x)(l - a 20 x)(l - a 33 x)(l - a 45 x)(l - a 46 x) 
(1 - a 47 x)(l - a 50 x)(l - a 53 x)(l - a 60 x) 

which properly retrieves the prototype codeword. 

(2) . A(x) = 1 + a 52 x and b(x) = a 55 . The candidate error locator polynomial is constructed as 

A'(x) = 1 + a 29 x + a 29 x 2 + a 1 x 3 + a 8 x 4 + a n x 5 + a n x 6 + a 15 x 7 + a 15 x 8 + a 28 x 9 

= (1 - a 10 x)(l - a 12 x)(l - a 19 x)(l - a 24 x)(l - a 28 x)(l - a 31 x)(l - a 33 x)(l - a 36 x) 
(1 - a 48 x)(l - a 49 x)(l - a 52 x)(l - a 59 x) 
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which yields an alternative candidate codeword with only 12-bit difference from the received word. 

c = [ 1,1,0, 0,1, 1,0, 0,0, 0,0, 0,0, 0,1, 1,1, 1,1, 1,1,1,1,0, 0,0, 0,1, 1,1,1, 
1,1,0,0,1,1,1,1,0,0,0,1,1,0,0,0,0,1,0,1,0,1,1,0,0,0,1,1,1,0,1,0]. 

(3). X(x) = 1 + a 32 x + a 19 x 2 and b(x) = a 45 + a 2S x. The corresponding candidate error locator 
polynomial is 

A' (*) = 1 + a 29 x + a 5 V + a 38 * 3 + aV + a 46 x 5 + a 52 * 6 + a 6 V + a 39 * 8 + a 14 * 9 
+a V° + a 59 * 11 + a 6 * 12 + a 3 V 3 + a 5 V 4 

which does not contain precisely 14 distinct nonzero roots in GF(64) and thus is spurious. □□ 

V. Concluding Remarks 

Although the proposed list decoding algorithms are presented in the context of the list decoding of 
Reed-Solomon and BCH codes, their core is a rational curve-fitting algorithm, which may be viewed 
as an extension of the polynomial curve-fitting algorithm proposed in [9]. 

Following the strategy of soft reliability transformation in the Koetter-Vardy algorithm [16], the 
proposed hard-decision list decoding algorithm can be extended in a straightforward manner to al- 
gebraic soft-decision decoding using weighted multiplicity array (in one-dimension), where weight is 
proportional to symbol error probability for (generalized) Reed-Solomon codes, or bit error probability 
for binary BCH codes. However, we may only obtain a one-dimensional multiplicity array due to the 
preprocessing of the Berlekamp-Massey algorithm, instead of a two-dimensional multiplicity matrix as 
in the Koetter-Vardy algorithm [16]. 

It is shown that the number of codewords is less than n for list decoding up to the Johnson bound 
for binary codes [1,7,10], whereas we have disclosed that the list size for decoding up to the Johnson 
bound is bounded by 0(t op t) for the particular class (nonbinary) Reed-Solomon and binary BCH 
codes. We thus conjecture that n is the universal bound for list decoding up to the Johnson bound 
for any code. 

Our developments are based on the notion of one-to-one correspondence along the two different 
definitions/interpretations of Reed-Solomon codes. Following the notion as well as the fact that BCH 
codes are subfield subcodes of Reed-Solomon codes [24], we conjecture that the Guruswami-Sudan 
algorithm can be modified in a way to achieve the Johnson bound for binary BCH codes. 
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